Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/2976ffbc-6481-36d3-9bc6-2e84b5c8e0bc.roa
File:                     2976ffbc-6481-36d3-9bc6-2e84b5c8e0bc.roa (raw, json)
Hash identifier:          oqqwucIoD4rNJlPTPVrZvwK7IQSEz7ZCtuUqadq+1Dk=
Subject key identifier:   11:B4:E8:86:3C:A2:0D:59:35:DA:D7:58:02:76:B5:31:D7:3F:7E:9D
Certificate issuer:       /CN=24664a36-96dd-46d7-9d91-bebf99797af1
Certificate serial:       010D0C9F4328584DC5659DFBB390DE1680EF7C80
Authority key identifier: 1B:72:32:4D:98:F7:CD:39:96:E6:96:F3:69:22:0E:02:99:E0:5D:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/2976ffbc-6481-36d3-9bc6-2e84b5c8e0bc.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     396982
IP address blocks:        2602:2e1:d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/24664a36-96dd-46d7-9d91-bebf99797af1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/24664a36-96dd-46d7-9d91-bebf99797af1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:9d:fb:b3:90:de:16:80:ef:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24664a36-96dd-46d7-9d91-bebf99797af1
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=fc06bb3b-232d-429e-8064-e2fe59e8462e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ef:08:06:be:4e:53:02:92:42:35:59:8e:ea:
                    ad:84:99:d3:a8:b5:0c:dd:11:66:f4:f8:76:40:cb:
                    e9:2e:1e:ef:d0:18:6a:03:09:58:29:74:46:c6:e1:
                    06:67:62:96:39:f7:e4:cb:01:a7:2b:49:80:ae:64:
                    29:36:e3:95:e3:4d:c5:97:ab:b4:69:4e:70:1b:76:
                    a1:10:4b:b1:06:77:a4:88:cf:35:6c:ff:01:a7:ca:
                    61:05:5b:cf:f1:fa:4b:0d:94:0e:b9:f5:ae:be:59:
                    b2:f0:e6:35:2c:5c:c3:e9:f6:16:ae:2d:0b:0c:ac:
                    3a:5f:31:79:d5:3e:9c:6e:49:34:87:77:bd:5b:00:
                    77:95:32:7a:85:b8:53:d4:65:7e:08:54:d8:bc:14:
                    05:37:15:ae:4c:df:c0:23:12:12:43:0c:48:c2:d7:
                    44:09:fb:b7:77:0b:6b:fa:dc:3d:13:8f:29:87:3e:
                    ea:3b:aa:7d:1a:f4:24:d2:a3:22:73:a0:c6:38:53:
                    50:3a:5a:a4:80:c9:1c:65:ea:5f:81:b1:e1:6d:b6:
                    17:07:a2:89:0f:22:e5:0d:fa:57:9e:25:4d:52:fb:
                    94:28:e4:46:ef:3a:b3:92:21:65:12:1e:17:f4:8a:
                    26:5d:56:28:a6:37:3e:73:25:9e:fc:b2:34:fe:c6:
                    70:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B4:E8:86:3C:A2:0D:59:35:DA:D7:58:02:76:B5:31:D7:3F:7E:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/2976ffbc-6481-36d3-9bc6-2e84b5c8e0bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/24664a36-96dd-46d7-9d91-bebf99797af1.crl

            X509v3 Authority Key Identifier:
                keyid:1B:72:32:4D:98:F7:CD:39:96:E6:96:F3:69:22:0E:02:99:E0:5D:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2e1:d0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:1e:41:dc:d6:74:9c:15:56:ef:32:53:ff:59:24:c8:94:e5:
         83:40:05:09:3b:5c:56:08:50:9f:65:bb:aa:8d:06:1d:bb:0c:
         dc:f0:b6:b8:e2:b2:b9:38:e3:19:52:38:d0:5d:ed:17:7f:92:
         02:32:e1:4c:64:5e:b0:96:c9:df:b2:64:b2:cb:56:18:7b:a7:
         e5:39:17:d3:1e:b5:2d:1b:6c:7c:87:09:da:b2:19:ca:ea:65:
         f3:26:f4:a4:3b:e4:c6:00:b7:9c:cc:49:2a:ef:ca:51:02:7c:
         9e:37:b0:84:04:3b:0a:a1:d0:11:b3:e1:09:a2:17:96:87:fe:
         48:c2:00:24:5b:77:7e:fb:ef:17:c2:02:05:59:a2:5d:31:b4:
         fe:fa:59:3c:bb:c5:2a:5d:d2:9c:97:fe:e2:8b:5e:f3:82:37:
         e9:ce:a5:17:cb:56:8e:2d:f7:90:e1:d9:44:e5:3d:06:a6:47:
         c7:2d:96:22:a2:33:84:57:f9:9c:86:9d:da:07:ab:69:2d:ab:
         1e:a5:4f:c9:1b:c7:5c:af:4f:a1:66:bb:e5:32:ed:54:88:77:
         62:48:0c:7b:b7:39:14:1c:90:ea:ed:46:8a:cc:0f:79:42:b4:
         e4:1c:37:89:5a:8c:e2:df:6f:1a:f6:a0:e4:99:25:81:e4:4f:
         62:4f:5d:02
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3FZZ37s5DeFoDvfIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ2NjRhMzYtOTZkZC00NmQ3LTlkOTEtYmViZjk5Nzk3
YWYxMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk
ZmMwNmJiM2ItMjMyZC00MjllLTgwNjQtZTJmZTU5ZTg0NjJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe8IBr5OUwKSQjVZjuqthJnTqLUM3RFm9Ph2
QMvpLh7v0BhqAwlYKXRGxuEGZ2KWOffkywGnK0mArmQpNuOV403Fl6u0aU5wG3ah
EEuxBnekiM81bP8Bp8phBVvP8fpLDZQOufWuvlmy8OY1LFzD6fYWri0LDKw6XzF5
1T6cbkk0h3e9WwB3lTJ6hbhT1GV+CFTYvBQFNxWuTN/AIxISQwxIwtdECfu3dwtr
+tw9E48phz7qO6p9GvQk0qMic6DGOFNQOlqkgMkcZepfgbHhbbYXB6KJDyLlDfpX
niVNUvuUKORG7zqzkiFlEh4X9IomXVYopjc+cyWe/LI0/sZwsQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBG06IY8og1ZNdrXWAJ2tTHXP36dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNDY2
NGEzNi05NmRkLTQ2ZDctOWQ5MS1iZWJmOTk3OTdhZjEvMjk3NmZmYmMtNjQ4MS0z
NmQzLTliYzYtMmU4NGI1YzhlMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjQ2NjRhMzYtOTZkZC00NmQ3LTlk
OTEtYmViZjk5Nzk3YWYxLzI0NjY0YTM2LTk2ZGQtNDZkNy05ZDkxLWJlYmY5OTc5
N2FmMS5jcmwwHwYDVR0jBBgwFoAUG3IyTZj3zTmW5pbzaSIOApngXa4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yNDY2NGEzNi05NmRkLTQ2ZDctOWQ5MS1iZWJm
OTk3OTdhZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIC4QDQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH4eQdzWdJwVVu8yU/9ZJMiU5YNABQk7XFYIUJ9lu6qNBh27DNzw
trjisrk44xlSONBd7Rd/kgIy4UxkXrCWyd+yZLLLVhh7p+U5F9MetS0bbHyHCdqy
GcrqZfMm9KQ75MYAt5zMSSrvylECfJ43sIQEOwqh0BGz4QmiF5aH/kjCACRbd377
7xfCAgVZol0xtP76WTy7xSpd0pyX/uKLXvOCN+nOpRfLVo4t95Dh2UTlPQamR8ct
liKiM4RX+ZyGndoHq2ktqx6lT8kbx1yvT6Fmu+Uy7VSId2JIDHu3ORQckOrtRorM
D3lCtOQcN4lajOLfbxr2oOSZJYHkT2JPXQI=
-----END CERTIFICATE-----
Generated at Wed May 13 06:54:29 2026 by rpki-client